Currently, you are employed as a solutions architect for a large international shipping company. The company is undergoing an IT transformation and they want to create an immutable database, where they can track packages as they are sent around the world. They will need to track what boxes they go in, what trucks they are sent in, and what aircraft or sea containers they are shipped in. The database needs to be immutable and cryptographically verifiable, and they would like to leverage the AWS cloud to achieve this. What database technology would best suit this requirement?

Amazon Quantum Ledger Database (QLDB)

A software company has developed a social gaming application that leverages EC2 web servers with Amazon DynamoDB to store player data, session history, and leaderboards for a huge number of concurrent users. The DynamoDB table has pre-configured read and write capacity units. Users have been reporting slowdown issues, and an analysis has revealed that the application requires response times in microseconds for optimal performance. What step can you take to enable this application to handle read-heavy or bursty workloads, while delivering the fastest possible response time for eventually consistent read operations?

Implement in-memory acceleration with DynamoDB Accelerator (DAX).

Add a load balancer in front of the EC2 web servers to decouple your application requests synchronously, improving performance for read-heavy and bursty workloads.

Deploy Amazon CloudFront to your architecture, so you can cache common Amazon DynamoDB queries and reduce response time to microseconds.

Configure Amazon SQS to queue requests that could be lost and improve the application response time.

A consultant is hired by a small company to configure an AWS environment. The consultant begins working with the VPC and launching EC2 instances within the VPC. The initial instances will be placed in a public subnet. The consultant begins to create security groups. The consultant has launched several instances, created security groups, and has associated security groups with instances. The consultant wants to change the security groups that are associated with the instance. Which statement is true?

You can change the security groups for an instance when the instance is in the running or stopped state.

You can't change the security groups for an instance when the instance is in the running or stopped state.

You can’t change security groups. Create a new instance and attach the desired security groups.

You can change the security groups for an instance when the instance is in the pending or stopped state.

A testing team is using a group of EC2 instances to run batch, automated tests on an application. The tests run overnight, but don’t take all night. The instances sit idle for long periods of time and accrue unnecessary charges. What can you do to stop these instances when they are idle for long periods?

You can create a CloudWatch alarm that is triggered when the average CPU utilization percentage has been lower than 10 percent for 4 hours, and stops the instance.

Write a Python script which queries the instance status. Also write a Lambda function which can be triggered upon a certain status and stop the instance.

Write a cron job which queries the instance status. Also write a Lambda function which can be triggered upon a certain status and stop the instance.

Write a cron job which queries the instance status. If a certain status is met, have the cron job kick off CloudFormation to terminate the existing instance, and create a new instance from a template.

You work for a Defense contracting company. The company develops software applications which perform intensive calculations in the area of Mechanical Engineering related to metals for ship building. You have a 3-year contract and decide to purchase reserved EC2 instances for a 3-year duration. You are informed that the particular program has been cancelled abruptly and negotiations have brought the contract to an amicable conclusion one year early. What can you do to stop incurring charges and save money on the EC2 instances?

Sell the reserved instances on the Reserved Instance Marketplace.

Change the instance states from running to stopped.

Write AWS and ask to terminate the contract.

Convert the instances to Spot Instances and allow them to go away through attrition.

The AWS team in a large company is spending a lot of time monitoring EC2 instances and maintenance when the instances report health check failures. How can you most efficiently automate this monitoring and repair?

Create an Amazon CloudWatch alarm that monitors an Amazon EC2 instance and automatically reboots the instance if a health check fails.

Create a Lambda function which can be triggered by a failed instance health check. Have the Lambda function deploy a CloudFormation template which can perform the creation of a new instance.

Create a Lambda function which can be triggered by a failed instance health check. Have the Lambda function destroy the instance and spin up a new instance.

Create a cron job which monitors the instances periodically and starts a new instance if a health check has failed.

You are working for a large financial institution and preparing for disaster recovery and upcoming DR drills. A key component in the DR plan will be the database instances and their data. An aggressive Recovery Time Objective (RTO) dictates that the database needs to be synchronously replicated. Which configuration can meet this requirement?

AWS Lambda triggers a CloudFormation template launch in another Region.

You work for an Australian company, who are currently being audited and need some compliance reports regarding your applications that are hosted on AWS. Specifically, they need a Australian Hosting Certification Framework - Strategic Certification certificate. You need to get this as quickly as possible. What should you do?

Use AWS Artifact to download the certificate

Use Amazon Detective to generate the report

Use AWS Certificate Manager to generate the certificate

Use AWS Trusted Advisor to generate the report

You are designing an architecture that will house an Auto Scaling group of EC2 instances. The application hosted on the instances is expected to be extremely popular. Forecasts for traffic to this site predict very high traffic, and you will need a load balancer to handle tens of millions of requests per second while maintaining high throughput at ultra-low latency. You need to select the correct type of load balancer to front your Auto Scaling group to meet this high traffic requirement. Which load balancer should you select?

You will need a Network Load Balancer to meet this requirement.

You will need an Application Load Balancer to meet this requirement.

You will need a Classic Load Balancer to meet this requirement.

All the AWS load balancers meet the requirement and perform the same.

You have just started working at a company that is migrating from a physical data center into AWS. Currently, you have 25 TB of data that needs to be moved to an S3 bucket. Your company has just finished setting up a 1 GB Direct Connect drop, but you will not have a VPN up and running for 30 days. This data needs to be encrypted during transit and at rest and must be uploaded to the S3 bucket within 21 days. What is the best way to meet these requirements?

Use a Snowball device to transmit the data.

Order a Snowcone device to transmit the data.

Upload the data using Direct Connect.

Upload the data to S3 using your public internet connection.

Jennifer is a cloud engineer for her application team. The application leverages several third-party SaaS vendors to complete their workflows within the application. Currently, the team uses numerous AWS Lambda functions for each SaaS vendor that run daily to connect to the configured vendor. The functions initiate a transfer of data files, ranging from one megabyte up to 80 gibibytes in size. These data files are stored in an Amazon S3 bucket and then referenced by the application itself. The data transfer routinely fails due to execution timeout limits in the Lambda functions, and the team wants to find a simpler and less error-prone way of transferring the required data. Which solution or AWS service could be the best fit for their solution?

Increase the Lambda function timeouts to one hour

A new startup company decides to use AWS to host their web application. They configure a VPC as well as two subnets within the VPC. They also attach an internet gateway to the VPC. In the first subnet, they create the EC2 instance which will host their web application. They finish the configuration by making the application accessible from the Internet. The second subnet hosts their database and they don’t want the database accessible from the Internet. Which statement best describes this scenario?

The web server is in a public subnet, and the database server is in a private subnet. The public subnet has a route to the internet gateway in the route table.

The web server is in a private subnet, and the database server is in a public subnet. The public subnet has a route to the internet gateway in the route table.

The web server is in a private subnet, and the database server is in a private subnet. A third subnet has a route to the Internet Gateway, which allows internet access.

The web server is in a public subnet, and the database server is in a public subnet. The public subnet has a route to the internet gateway in the route table.

You are evaluating the security setting within the main company VPC. There are several NACLs and security groups to evaluate and possibly edit. What is true regarding NACLs and security groups?

Network ACLs are stateless, and security groups are stateful.

Network ACLs and security groups are both stateless.

Network ACLs are stateful, and security groups are stateless.

Network ACLs and security groups are both stateful.

An application is hosted on an EC2 instance in a VPC. The instance is in a subnet in the VPC, and the instance has a public IP address. There is also an internet gateway and a security group with the proper ingress configured. But your testers are unable to access the instance from the Internet. What could be the problem?

Add a route to the route table, from the subnet containing the instance, to the Internet Gateway.

Make sure the instance has a private IP address.

A virtual private gateway needs to be configured.

A NAT gateway needs to be configured.

Due to strict compliance requirements, your company cannot leverage AWS cloud for hosting their Kubernetes clusters, nor for managing the clusters. However, they do want to try to follow the established best practices and processes that the Amazon EKS service has implemented. How can your company achieve this while running entirely on-premises?

Run the clusters on-premises using Amazon EKS Distro.

You are managing S3 buckets in your organization. This management of S3 extends to Amazon Glacier. For auditing purposes you would like to be informed if an object is restored to S3 from Glacier. What is the most efficient way you can do this?

Configure S3 notifications for restore operations from Glacier

Create an SNS notification for any upload to S3

Create a Lambda function which is triggered by restoration of object from Glacier to S3

Create a CloudWatch Event for uploads to S3

You are working in a large healthcare facility which uses EBS volumes on most of the EC2 instances. The CFO has approached you about some cost savings and it has been decided that some of the EC2 instances and EBS volumes would be deleted. What step can be taken to preserve the data on the EBS volumes and keep the data available on short notice?

Take point-in-time snapshots of your Amazon EBS volumes.

Store the data in CloudFormation user data.

Your company has a multi-account AWS environment with over 100 accounts. Each account belongs to a specific application team within the company, and they all fall within the same consolidated billing family. The company has just received funding for the next two years, but they are unsure about anything beyond that. With this in mind, they plan on aggressively deploying applications to AWS during the two years. Recently, there was a massive spike in unplanned Amazon EC2 and AWS Lambda costs, causing significant financial stress. What can an organization administrator do to maximize savings for the entire organization for this first year?

Purchase a one-year All Upfront Compute Savings Plan.

Purchase a three-year All Upfront Compute Savings Plan.

Purchase a one-year All Upfront EC2 Instance Savings Plan.

Purchase a three-year All Upfront EC2 Instance Savings Plan.

You have been evaluating the NACLs in your company. Currently, you are looking at the default network ACL. Which statement is true about NACLs?

The default configuration of the default NACL is Allow, and the default configuration of a custom NACL is Deny.

The default configuration of the default NACL is Allow, and the default configuration of a custom NACL is Allow.

The default configuration of the default NACL is Deny, and the default configuration of a custom NACL is Deny.

The default configuration of the default NACL is Deny, and the default configuration of a custom NACL is Allow.

You are working for a startup company with a small number of employees. The company expects rapid growth and you have been assigned to configure existing users and onboard new users with IAM privileges and logins. You intend to create IAM groups for the company departments and add new users to the appropriate group when you onboard them. You begin creating policies to assign permissions and attach them to the appropriate group. What is the best practice when giving users permissions in IAM policies?

Use the principle of least privilege.

Create a policy for each department head granting root access.

Use the principle of top-down privilege.

Grant all permissions to each AWS service the user will work with.

You have been evaluating the NACLs in your company. Most of the NACLs are configured the same: 100 All Traffic Allow 200 All Traffic Deny * All Traffic Deny If a request comes in, how will it be evaluated?

All rules will be evaluated and the end result will be Deny.

The highest numbered rule will be used, a deny.

You have been given an assignment to configure Network ACLs in your VPC. Before configuring the NACLs, you need to understand how the NACLs are evaluated. How are NACL rules evaluated?

NACL rules are evaluated by rule number from lowest to highest and executed immediately when a matching rule is found.

NACL rules are evaluated by rule number from highest to lowest, and executed immediately when a matching rule is found.

NACL rules are evaluated by rule number from highest to lowest, and all are evaluated before traffic is passed through.

All NACL rules that you configure are evaluated before traffic is passed through.

Your company is in the process of creating a multi-region disaster recovery solution for your database, and you have been tasked to implement it. The required RTO is 1 hour, and the RPO is 15 minutes. What steps can you take to ensure these thresholds are met?

Use RDS to host your database. Create a cross-region read replica of your database. In the event of a failure, promote the read replica to be a standalone database. Send new reads and writes to this database.

Take EBS snapshots of the required EC2 instances nightly. In the event of a disaster, restore the snapshots to another region.

Use Redshift to host your database. Enable "multi-region" failover with Redshift. In the event of a failure, do nothing, as Redshift will handle it for you.

Use RDS to host your database. Enable the Multi-AZ option for your database. In the event of a failure, cut over to the secondary database.

An Application Load Balancer is fronting an Auto Scaling Group of EC2 instances, and the instances are backed by an RDS database. The Auto Scaling Group has been configured to use the Default Termination Policy. You are testing the Auto Scaling Group and have triggered a scale-in. Which instance will be terminated first?

The instance launched from the oldest launch configuration.

The instance for which the load balancer stops sending traffic.

The Auto Scaling Group will randomly select an instance to terminate.

A small startup company has multiple departments with small teams representing each department. They have hired you to configure Identity and Access Management in their AWS account. The team expects to grow rapidly, and promote from within which could mean promoted team members switching over to a new team fairly often. How can you configure IAM to prepare for this type of growth?

Create the user accounts, create a group for each department, create and attach an appropriate policy to each group, and place each user account into their department’s group. When new team members are onboarded, create their account and put them in the appropriate group. If an existing team member changes departments, move their account to their new IAM group.

Create the user accounts, create a role for each department, create and attach an appropriate policy to each role, and place each user account into their department’s role. When new team members are onboarded, create their account and put them in the appropriate role. If an existing team member changes departments, move their account to their new IAM group.

Create the user accounts, create a group for each department, create and attach an appropriate role to each group, and place each user account into their department’s group. When new team members are onboarded, create their account and put them in the appropriate group. If an existing team member changes departments, move their account to their new IAM group.

Create the user accounts, create a group for each department, create and attach an appropriate policy to each group, and place each user account into their department’s group. When new team members are onboarded, create their account and put them in the appropriate group. If an existing team member changes departments, delete their account, create a new account and put the account in the appropriate group.

A Solutions Architect has been assigned the task of helping the company development optimize the performance of their web application. End users have been complaining about slow response times. The Solutions Architect has determined that improvements can be realized by adding ElastiCache to the solution. What can ElastiCache do to improve performance?

Cache frequently accessed data in-memory.

Queue up requests and allow the processor time to catch-up.

Offload some of the write traffic to the database.

Delivers up to 10x performance improvement from milliseconds to microseconds or even at millions of requests per second.

AWS Certified Solutions Architect - Associate (SAA-C03) - 1

Authored by José Diaz

Computers

1st Grade

Used 12+ times

AWS Certified Solutions Architect - Associate (SAA-C03) - 1

AI Actions

Add similar questions

Adjust reading levels

Convert to real-world scenario

Translate activity

More...

Content View

Student View

65 questions

Show all answers

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You work for an online retailer where any downtime at all can cause a significant loss of revenue. You have architected your application to be deployed on an Auto Scaling Group of EC2 instances behind a load balancer. You have configured and deployed these resources using a CloudFormation template. The Auto Scaling Group is configured with default settings and a simple CPU utilization scaling policy. You have also set up multiple Availability Zones for high availability. The load balancer does health checks against an HTML file generated by script. When you begin performing load testing on your application and notice in CloudWatch that the load balancer is not sending traffic to one of your EC2 instances. What could be the problem?

The EC2 instance has failed the load balancer health check.

The instance has not been registered with CloudWatch.

The EC2 instance has failed EC2 status checks.

You are load testing at a moderate traffic level and not all instances are needed.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

Your company has performed a Disaster Recovery drill which failed to meet the Recovery Time Objective (RTO) desired by executive management. The failure was due in large part to the amount of time taken to restore proper functioning on the database side. You have given management a recommendation of implementing synchronous data replication for the RDS database to help meet the RTO. Which of these options can perform synchronous data replication in RDS?

RDS Multi-AZ

Read replicas

DAX

AWS Database Migration Service

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You work for an advertising company that has a real-time bidding application. You are also using CloudFront on the front end to accommodate a worldwide user base. Your users begin complaining about response times and pauses in real-time bidding. What is the best service that can be used to reduce DynamoDB response times by an order of magnitude (milliseconds to microseconds)?

CloudFront Edge Caches

ElastiCache

DynamoDB Auto Scaling

DAX

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You work for a large healthcare provider as an AWS lead architect. There is a need to collect data in real-time from devices throughout the organization. The data will include log and event data from sources such as servers, desktops, and mobile devices. The data initially captured will be technical device data, but the goal is to expand the effort to collecting clinical data in real-time from handheld devices used by nurses and doctors. Which AWS service best meets this requirement?

Kinesis Video Streams

AWS Lambda

AWS Redshift

Kinesis Data Streams

MULTIPLE SELECT QUESTION

3 mins • 1 pt

A new startup is considering the advantages of using Amazon DynamoDB versus a traditional relational database in AWS RDS. The NoSQL nature of DynamoDB presents a small learning curve to the team members who all have experience with traditional databases. The company will have multiple databases, and the decision will be made on a case-by-case basis. Which of the following use cases would favor Amazon DynamoDB?
(Choose3)

Strong referential integrity between tables

Managing web session data

Storing metadata for S3 objects

Storing binary large object (BLOB) data

High-performance reads and writes for online transaction processing (OLTP) workloads

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

After an IT Steering Committee meeting, you have been put in charge of configuring a hybrid environment for the company’s compute resources. You weigh the pros and cons of various technologies, such as VPN and Direct Connect, and based on the requirements you have decided to configure a VPN connection. What features and advantages can a VPN connection provide?

It provides a network connection between two VPCs that can route traffic using IPv4 or IPv6.

It provides a cost-effective, private network connection that bypasses the internet.

It provides a connection between an on-premises network and a VPC, using a secure and private connection with IPsec and TLS.

It provides a private, dedicated network connection between an on-premises network and the VPC.

MULTIPLE CHOICE QUESTION

3 mins • 1 pt

You are designing a new application for a social media gaming company and they want to be able to use people’s facebook account to login and to sign up to the new app. They’ve asked that you use Cognito to achieve this. However, management wants to know the steps involved for user authentication. Which of the steps below is the correct order to authenticate with Cognito?

Step 1 - Exchange tokens and get AWS credentials. Step 2 - Access AWS services using credentials. Step 3 - Authenticate and get tokens.

Step 1 - Authenticate and get tokens. Step 2 - Exchange tokens and get AWS credentials. Step 3 - Access AWS services using credentials.

Step 1 - Access AWS services using credentials. Step 2 - Exchange tokens and get AWS credentials. Step 3 - Authenticate and get tokens.

Step 1 - Exchange tokens and get AWS credentials. Step 2 - Authenticate and get tokens. Step 3 - Access AWS services using credentials.

Access all questions and much more by creating a free account

Create resources

Host any resource

Get auto-graded reports

Continue with Google

Continue with Email

Continue with Classlink

Continue with Clever

or continue with

Microsoft

Apple

Others

Already have an account?

Similar Resources on Wayground

69 questions

cc full quiz

Quiz

•

1st Grade

60 questions

Diagnostic Associate Diploma Graphic Design - Repeat-1

Quiz

•

1st Grade

60 questions

Data Entry Operator Quiz

Quiz

•

1st Grade

70 questions

informatika 7

Quiz

•

1st Grade

67 questions

OCI - Foundations

Quiz

•

1st Grade

64 questions

Quiz Pemasangan Kabel UTP

Quiz

•

1st Grade

Popular Resources on Wayground

8 questions

Spartan Way - Classroom Responsible

Quiz

•

9th - 12th Grade

15 questions

Fractions on a Number Line

Quiz

•

3rd Grade

14 questions

Boundaries & Healthy Relationships

Lesson

•

6th - 8th Grade

20 questions

Equivalent Fractions

Quiz

•

3rd Grade

3 questions

Integrity and Your Health

Lesson

•

6th - 8th Grade

25 questions

Multiplication Facts

Quiz

•

5th Grade

9 questions

FOREST Perception

Lesson

•

20 questions

Main Idea and Details

Quiz

•

5th Grade

Discover more resources for Computers

20 questions

Telling Time to the Hour and Half hour

Quiz

•

1st Grade

7 questions

Understanding Parallel, Intersecting, and Perpendicular Lines

Interactive video

•

1st - 6th Grade

16 questions

Counting Coins counting money

Quiz

•

1st - 2nd Grade

20 questions

Place Value

Quiz

•

KG - 3rd Grade

10 questions

Counting Coins

Quiz

•

1st Grade

10 questions

Telling time to the hour and half hour

Quiz

•

1st - 2nd Grade

15 questions

Grammar

Quiz

•

KG - 7th Grade

10 questions

First Grade Balancing Equations

Quiz

•

1st - 2nd Grade